Enterprise Security
The latest Enterprise Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Zenity Labs’ AgentFlayer Exposes Zero-Click Exploits: Microsoft Copilot, ChatGPT AI Agents Hijacked Without User Action
At Black Hat USA 2025, security researchers from Zenity Labs pulled back the curtain on a dangerously overlooked attack surface: enterprise AI agents that can be silently hijacked with zero user...
CISA Orders Emergency Fix for Exchange Hybrid Bug Allowing 'Total Domain Compromise'
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive requiring federal agencies to patch a severe Microsoft Exchange vulnerability by August 11, warning...
CISA Sets August 11 Deadline for Critical Exchange Hybrid Patch as Exploits Emerge
The U.S. Cybersecurity and Infrastructure Security Agency issued Emergency Directive 25-02 on August 7, 2025, giving federal agencies fewer than four days to remediate a high-severity vulnerability...
Sophos and Rubrik Erase the Gap Between Threat Detection and Recovery for Microsoft 365
Black Hat USA 2025 witnessed the unveiling of a solution that could redefine how security teams respond to ransomware and data loss within Microsoft 365. Sophos and Rubrik announced a deep...
Abnormal AI Automates Microsoft 365 Posture Management to Counter Midnight Blizzard-Style Attacks
Abnormal AI has unveiled a major update to its Security Posture Management platform, arming Microsoft 365 administrators with AI-driven automation to detect, prioritize, and remediate dangerous...
Abnormal AI’s New Posture Management Auto-Prioritizes Microsoft 365 Risks for Faster Remediation
Abnormal AI has rolled out a substantial update to its Security Posture Management platform, embedding AI-driven automation deep into the process of identifying, prioritizing, and fixing...
The 2025 Email Security Shift: Why Proofpoint, Mimecast, and Others Are Replacing Microsoft EOP
Microsoft Exchange Online Protection (EOP) has been the default email security gatekeeper for millions of businesses, but in 2025, a growing number of organizations are finding its basic defenses...
Tenable Unveils AI Exposure: New Module Secures ChatGPT and Copilot in Enterprises
Tenable has launched a private customer preview of Tenable AI Exposure, a new module within its Tenable One platform engineered to give organizations visibility and control over generative AI tools...
Exchange Hybrid Attack Turns On-Prem Admin into Cloud Hijacker: CVE-2025-53786 Exposes Identity Perimeter Crisis
A single compromised on-premises Exchange administrator can now seize control of an organization’s entire Microsoft 365 cloud—for up to 24 hours, with virtually no audit trail. That is the urgent...
Rubrik and Sophos Debut First MDR-Optimized Backup and Recovery for Microsoft 365
Sophos and Rubrik have jointly announced a strategic partnership to deliver the industry’s first Managed Detection and Response (MDR)-optimized backup and recovery solution for Microsoft 365,...
Microsoft Issues Emergency Patch for Critical WSL Vulnerability CVE-2025-53788
A quiet urgency has swept across both the Windows and Linux communities with Microsoft’s recent emergency patch for a critical security vulnerability in the Windows Subsystem for Linux (WSL). This...
Critical Security Update for Microsoft Exchange Server Hybrid Environments: Addressing CVE-2025-53786 Vulnerability
A new critical security update targeting Microsoft Exchange Server environments—specifically those deployed in hybrid cloud configurations—has rapidly gained attention among IT administrators and...